Critical severity · published Aug 15, 2023
CVE-2023-35082
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
RansomwareIn wildKEV
9.8
CVSS
100%
EPSS
Yes
On KEV
Description
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 18, 2024
Federal remediation dueFeb 8, 2024
Ransomware campaign useKnown
Affected products
Which versions
EM
Endpoint Manager Mobile · Ivanti
11.10 through 11.10 · source: vendor, NVD
EM
Endpoint Manager Mobile (EPMM) and MobileIron Core · Ivanti
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-35082
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-35082
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
forums.ivanti.com
https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US
More from Endpoint Manager Mobile
9.8
CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
9.8
CVE-2026-1281
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
9.8
CVE-2023-35078
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
8.8
CVE-2025-4428
Remote Code Execution
7.5
CVE-2025-4427
Authentication Bypass